@striae-org/striae 6.1.6 → 6.1.8

package/.env.example

@@ -149,4 +149,4 @@ PRIMERSHEAR_EMAILS=
 # Comma-separated list of email addresses that may register an account.
 # Leave empty to disable the feature. Never commit this value to source control.
 # Example: REGISTRATION_EMAILS=analyst@org.com,user2@org.com
-REGISTRATION_EMAILS=
+REGISTRATION_EMAILS=

package/README.md

@@ -36,7 +36,7 @@ Included:
 - `app/` source (with `app/config-example/`)
 - `functions/`, `public/`
 - Worker package manifests
-- Worker source files needed by the example workers, including nested helper modules, while excluding production worker entry files (`workers/*/src/**/*.ts` excluding `workers/*/src/**/*worker.ts`)
+- Worker source files needed by the workers, including nested helper modules
 - PDF worker example support files limited to `workers/pdf-worker/src/assets/generated-assets.example.ts` and `workers/pdf-worker/src/formats/format-striae.ts` (no extra PDF image assets or custom formats)
 - Worker example Wrangler configs (`workers/*/wrangler.jsonc.example`)
 - Project-level example and build config (`.env.example`, `wrangler.toml.example`, `tsconfig.json`, etc.)
@@ -60,6 +60,5 @@ See `LICENSE`.
 
 ## Support
 
-- Striae Community: [https://community.striae.org](https://community.striae.org)
 - Support page: [https://www.striae.org/support](https://www.striae.org/support)
 - Contact: [info@striae.org](mailto:info@striae.org)

package/app/components/navbar/case-modals/all-cases-modal.tsx

@@ -33,6 +33,7 @@ interface CasesModalProps {
   isOpen: boolean;
   onClose: () => void;
   onSelectCase: (caseNum: string) => void;
+  onCurrentCaseDeleted?: () => void;
   currentCase: string;
   user: User;
   confirmationSaveVersion?: number;
@@ -64,6 +65,7 @@ export const CasesModal = ({
   isOpen,
   onClose,
   onSelectCase,
+  onCurrentCaseDeleted,
   currentCase,
   user,
   confirmationSaveVersion = 0,
@@ -224,16 +226,14 @@ export const CasesModal = ({
   );
 
   const canDeleteSelectedCase = Boolean(
-    selectedCase && selectedCase.caseNumber !== currentCase && !selectedCase.isReadOnly
+    selectedCase && !selectedCase.isReadOnly
   );
 
   const deleteSelectedCaseTitle = !selectedCase
     ? 'Select a case to delete.'
-    : selectedCase.caseNumber === currentCase
-      ? 'Open a different case before deleting this one.'
-      : selectedCase.isReadOnly
-        ? 'Read-only review cases cannot be deleted. Use Clear RO Case under Case Management first.'
-        : undefined;
+    : selectedCase.isReadOnly
+      ? 'Read-only review cases cannot be deleted here. Use Clear RO Case under Case Management first.'
+      : undefined;
 
   const effectiveFocusedIndex = paginatedCases.length === 0 ? 0 : Math.min(focusedIndex, paginatedCases.length - 1);
 
@@ -475,16 +475,13 @@ export const CasesModal = ({
 
   const handleDeleteSelectedCase = async () => {
     if (!selectedCase || !canDeleteSelectedCase) {
-      const isCurrentCaseSelection = selectedCase?.caseNumber === currentCase;
       const isReadOnlyReviewSelection = selectedCase?.isReadOnly === true;
 
       setActionNotice({
         type: 'warning',
-        message: isCurrentCaseSelection
-          ? 'Open a different case before deleting this one.'
-          : isReadOnlyReviewSelection
-            ? 'Read-only review cases cannot be deleted. Use Clear RO Case under Case Management first.'
-            : 'Selected case cannot be deleted.',
+        message: isReadOnlyReviewSelection
+          ? 'Read-only review cases cannot be deleted here. Use Clear RO Case under Case Management first.'
+          : 'Selected case cannot be deleted.',
       });
       return;
     }
@@ -506,11 +503,16 @@ export const CasesModal = ({
     setActionNotice(null);
 
     try {
+      const wasCurrentCase = selectedCase.caseNumber === currentCase;
       const deleteResult = await deleteCase(user, selectedCase.caseNumber);
       setSelectedCaseNumber(null);
       setIsDeleteModalOpen(false);
       setRefreshKey((k) => k + 1);
 
+      if (wasCurrentCase) {
+        onCurrentCaseDeleted?.();
+      }
+
       if (deleteResult.missingImages.length > 0) {
         setActionNotice({
           type: 'warning',

package/app/routes/auth/emailActionHandler.tsx

@@ -20,7 +20,7 @@ interface EmailActionHandlerProps {
   lang: string | null;
 }
 
-type HandlerState = 'loading' | 'ready-reset' | 'success' | 'error' | 'unsupported';
+type HandlerState = 'loading' | 'ready-reset' | 'success' | 'error';
 
 const getUserAgent = (): string | undefined => {
   if (typeof navigator === 'undefined') {
@@ -171,16 +171,6 @@ export const EmailActionHandler = ({ mode, oobCode, continueUrl, lang }: EmailAc
         return;
       }
 
-      if (mode === 'recoverEmail') {
-        if (!isMounted) {
-          return;
-        }
-
-        setState('unsupported');
-        setError('Email change recovery is not supported for Striae accounts.');
-        return;
-      }
-
       if (!isMounted) {
         return;
       }
@@ -378,7 +368,7 @@ export const EmailActionHandler = ({ mode, oobCode, continueUrl, lang }: EmailAc
           </form>
         )}
 
-        {(state === 'success' || state === 'error' || state === 'unsupported') && (
+        {(state === 'success' || state === 'error') && (
           <div className={styles.actions}>
             {showContinueButton && (
               <button

package/app/routes/auth/login.tsx

@@ -28,9 +28,7 @@ import { generateUniqueId } from '~/utils/common';
 import { evaluatePasswordPolicy, buildActionCodeSettings, userHasMFA } from '~/utils/auth';
 import type { UserData } from '~/types';
 
-const DEMO_COMPANY_NAME = 'STRIAE DEMO';
-
-const SUPPORTED_EMAIL_ACTION_MODES = new Set(['resetPassword', 'verifyEmail', 'recoverEmail']);
+const SUPPORTED_EMAIL_ACTION_MODES = new Set(['resetPassword', 'verifyEmail']);
 
 const getUserFirstName = (user: User): string => {
   const displayName = user.displayName?.trim();
@@ -69,7 +67,7 @@ export const Login = () => {
   const [isClient, setIsClient] = useState(false);
   const [firstName, setFirstName] = useState('');
   const [lastName, setLastName] = useState('');
-  const [company, setCompany] = useState(DEMO_COMPANY_NAME);
+  const [company, setCompany] = useState('');
   const [badgeId, setBadgeId] = useState('');
   const [confirmPasswordValue, setConfirmPasswordValue] = useState('');
   

package/app/routes/striae/striae.tsx

@@ -22,7 +22,7 @@ import { fetchUserApi } from '~/utils/api';
 import { type AnnotationData, type FileData, type ExportOptions } from '~/types';
 import { validateCaseNumber, renameCase, deleteCase, checkExistingCase, createNewCase, archiveCase, deriveCaseArchiveDetails } from '~/components/actions/case-manage';
 import { checkReadOnlyCaseExists, deleteReadOnlyCase } from '~/components/actions/case-review';
-import { canCreateCase, getCaseConfirmationSummary, getCaseData, getConfirmationSummaryDocument, type UserConfirmationSummaryDocument } from '~/utils/data';
+import { canCreateCase, ensureCaseConfirmationSummary, getCaseData, getConfirmationSummaryDocument, type UserConfirmationSummaryDocument } from '~/utils/data';
 import {
   resolveEarliestAnnotationTimestamp,
   CREATE_READ_ONLY_CASE_EXISTS_ERROR,
@@ -382,7 +382,9 @@ export const Striae = ({ user }: StriaePage) => {
     if (!currentCase || !user) return;
 
     try {
-      const summary = await getCaseConfirmationSummary(user, currentCase);
+      const summary = await ensureCaseConfirmationSummary(user, currentCase, files, {
+        forceRefresh: true,
+      });
       const filesById = summary?.filesById ?? {};
       const values = Object.values(filesById);
       const confirmedCount = values.filter((f) => f.includeConfirmation && f.isConfirmed).length;
@@ -955,6 +957,7 @@ export const Striae = ({ user }: StriaePage) => {
         onSelectCase={(selectedCase) => {
           void loadCaseIntoWorkspace(selectedCase);
         }}
+        onCurrentCaseDeleted={clearLoadedCaseState}
         currentCase={currentCase || ''}
         user={user}
         confirmationSaveVersion={confirmationSaveVersion}

package/app/utils/api/data-api-client.ts

@@ -38,6 +38,7 @@ export async function fetchDataApi(
 
   return fetch(`${DATA_API_BASE}${normalizedPath}`, {
     ...init,
+    cache: 'no-store',
     headers
   });
 }

package/app/utils/data/permissions.ts

@@ -550,6 +550,8 @@ export const addUserCase = async (user: User, caseData: CaseMetadata): Promise<v
       const errorText = await response.text();
       throw new Error(`Failed to add case to user: ${response.status} - ${errorText}`);
     }
+
+    invalidateUserDataCache(user.uid);
     
   } catch (error) {
     console.error('Error adding case to user:', error);
@@ -595,6 +597,8 @@ export const removeUserCase = async (user: User, caseNumber: string): Promise<vo
       const errorText = await response.text();
       throw new Error(`Failed to remove case from user: ${response.status} - ${errorText}`);
     }
+
+    invalidateUserDataCache(user.uid);
     
   } catch (error) {
     console.error('Error removing case from user:', error);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@striae-org/striae",
-  "version": "6.1.6",
+  "version": "6.1.8",
   "private": false,
   "description": "Striae is a specialized, cloud-native platform designed to streamline forensic firearms identification by providing an intuitive environment for digital comparison image annotation, authenticated confirmations, and automated report generation.",
   "license": "Apache-2.0",
@@ -44,7 +44,6 @@
     "!workers/*/package-lock.json",
     "!workers/*/worker-configuration.d.ts",
     "!workers/*/wrangler.jsonc",
-    "!workers/*/src/**/*worker.ts",
     "!workers/pdf-worker/src/assets/**/*",
     "workers/pdf-worker/src/assets/generated-assets.example.ts",
     "!workers/pdf-worker/src/formats/**/*",
@@ -79,6 +78,11 @@
     "typegen": "wrangler types",
     "preview": "npm run build && wrangler pages dev",
     "cf-typegen": "wrangler types",
+    "test": "npm run test:app && npm run test:workers:data",
+    "test:app": "vitest run --config tests/app/vitest.config.ts",
+    "test:workers:data": "vitest run --config tests/workers/data/vitest.config.mjs",
+    "test:watch": "vitest --config tests/app/vitest.config.ts",
+    "test:coverage": "vitest run --config tests/app/vitest.config.ts --coverage",
     "enable-totp-mfa": "node ./scripts/enable-totp-mfa.mjs",
     "unenroll-totp-mfa": "node ./scripts/unenroll-totp-mfa.mjs",
     "update-versions": "node ./scripts/update-markdown-versions.cjs",
@@ -100,7 +104,7 @@
   },
   "dependencies": {
     "@react-router/cloudflare": "^7.14.1",
-    "firebase": "^12.12.0",
+    "firebase": "^12.12.1",
     "isbot": "^5.1.39",
     "jszip": "^3.10.1",
     "qrcode": "^1.5.4",
@@ -109,13 +113,15 @@
     "react-router": "^7.14.1"
   },
   "devDependencies": {
+    "@cloudflare/vitest-pool-workers": "^0.14.8",
     "@react-router/dev": "^7.14.1",
     "@react-router/fs-routes": "^7.14.1",
     "@types/qrcode": "^1.5.6",
     "@types/react": "^19.2.14",
     "@types/react-dom": "^19.2.3",
-    "@typescript-eslint/eslint-plugin": "^8.58.2",
-    "@typescript-eslint/parser": "^8.58.2",
+    "@typescript-eslint/eslint-plugin": "^8.59.0",
+    "@typescript-eslint/parser": "^8.59.0",
+    "@vitest/coverage-v8": "^4.1.4",
     "eslint": "^9.39.4",
     "eslint-import-resolver-typescript": "^4.4.4",
     "eslint-plugin-import": "^2.32.0",
@@ -125,8 +131,9 @@
     "firebase-admin": "^13.8.0",
     "modern-normalize": "^3.0.1",
     "typescript": "^6.0.3",
-    "vite": "^8.0.8",
-    "wrangler": "^4.83.0"
+    "vite": "^8.0.9",
+    "vitest": "^4.1.4",
+    "wrangler": "^4.84.0"
   },
   "overrides": {
     "@tootallnate/once": "3.0.1"

package/scripts/deploy-config/modules/scaffolding.sh

@@ -109,44 +109,6 @@ copy_example_configs() {
     # Return to project root
     cd ../..
 
-    # Copy worker source template files
-    echo -e "${YELLOW}  Copying worker source template files...${NC}"
-
-    if [ -f "workers/user-worker/src/user-worker.example.ts" ] && { [ "$update_env" = "true" ] || [ ! -f "workers/user-worker/src/user-worker.ts" ]; }; then
-        cp workers/user-worker/src/user-worker.example.ts workers/user-worker/src/user-worker.ts
-        echo -e "${GREEN}    ✅ user-worker: user-worker.ts created from example${NC}"
-    elif [ -f "workers/user-worker/src/user-worker.ts" ]; then
-        echo -e "${YELLOW}    ⚠️  user-worker: user-worker.ts already exists, skipping copy${NC}"
-    fi
-
-    if [ -f "workers/data-worker/src/data-worker.example.ts" ] && { [ "$update_env" = "true" ] || [ ! -f "workers/data-worker/src/data-worker.ts" ]; }; then
-        cp workers/data-worker/src/data-worker.example.ts workers/data-worker/src/data-worker.ts
-        echo -e "${GREEN}    ✅ data-worker: data-worker.ts created from example${NC}"
-    elif [ -f "workers/data-worker/src/data-worker.ts" ]; then
-        echo -e "${YELLOW}    ⚠️  data-worker: data-worker.ts already exists, skipping copy${NC}"
-    fi
-
-    if [ -f "workers/audit-worker/src/audit-worker.example.ts" ] && { [ "$update_env" = "true" ] || [ ! -f "workers/audit-worker/src/audit-worker.ts" ]; }; then
-        cp workers/audit-worker/src/audit-worker.example.ts workers/audit-worker/src/audit-worker.ts
-        echo -e "${GREEN}    ✅ audit-worker: audit-worker.ts created from example${NC}"
-    elif [ -f "workers/audit-worker/src/audit-worker.ts" ]; then
-        echo -e "${YELLOW}    ⚠️  audit-worker: audit-worker.ts already exists, skipping copy${NC}"
-    fi
-
-    if [ -f "workers/image-worker/src/image-worker.example.ts" ] && { [ "$update_env" = "true" ] || [ ! -f "workers/image-worker/src/image-worker.ts" ]; }; then
-        cp workers/image-worker/src/image-worker.example.ts workers/image-worker/src/image-worker.ts
-        echo -e "${GREEN}    ✅ image-worker: image-worker.ts created from example${NC}"
-    elif [ -f "workers/image-worker/src/image-worker.ts" ]; then
-        echo -e "${YELLOW}    ⚠️  image-worker: image-worker.ts already exists, skipping copy${NC}"
-    fi
-
-    if [ -f "workers/pdf-worker/src/pdf-worker.example.ts" ] && { [ "$update_env" = "true" ] || [ ! -f "workers/pdf-worker/src/pdf-worker.ts" ]; }; then
-        cp workers/pdf-worker/src/pdf-worker.example.ts workers/pdf-worker/src/pdf-worker.ts
-        echo -e "${GREEN}    ✅ pdf-worker: pdf-worker.ts created from example${NC}"
-    elif [ -f "workers/pdf-worker/src/pdf-worker.ts" ]; then
-        echo -e "${YELLOW}    ⚠️  pdf-worker: pdf-worker.ts already exists, skipping copy${NC}"
-    fi
-
     # Copy main wrangler.toml from example
     if [ -f "wrangler.toml.example" ] && { [ "$update_env" = "true" ] || [ ! -f "wrangler.toml" ]; }; then
         cp wrangler.toml.example wrangler.toml
@@ -187,12 +149,6 @@ update_wrangler_configs() {
         echo -e "${GREEN}    ✅ audit-worker configuration updated${NC}"
     fi
 
-    if [ -f "workers/audit-worker/src/audit-worker.ts" ]; then
-        echo -e "${YELLOW}  Updating audit-worker source placeholders...${NC}"
-        sed -i "s|'Access-Control-Allow-Origin': '[^']*'|'Access-Control-Allow-Origin': 'https://$escaped_pages_custom_domain'|g" workers/audit-worker/src/audit-worker.ts
-        echo -e "${GREEN}    ✅ audit-worker source placeholders updated${NC}"
-    fi
-
     if [ -f "workers/data-worker/wrangler.jsonc" ]; then
         echo -e "${YELLOW}  Updating data-worker/wrangler.jsonc...${NC}"
         sed -i "s/\"DATA_WORKER_NAME\"/\"$DATA_WORKER_NAME\"/g" workers/data-worker/wrangler.jsonc
@@ -201,12 +157,6 @@ update_wrangler_configs() {
         echo -e "${GREEN}    ✅ data-worker configuration updated${NC}"
     fi
 
-    if [ -f "workers/data-worker/src/data-worker.ts" ]; then
-        echo -e "${YELLOW}  Updating data-worker source placeholders...${NC}"
-        sed -i "s|'Access-Control-Allow-Origin': '[^']*'|'Access-Control-Allow-Origin': 'https://$escaped_pages_custom_domain'|g" workers/data-worker/src/data-worker.ts
-        echo -e "${GREEN}    ✅ data-worker source placeholders updated${NC}"
-    fi
-
     if [ -f "workers/image-worker/wrangler.jsonc" ]; then
         echo -e "${YELLOW}  Updating image-worker/wrangler.jsonc...${NC}"
         sed -i "s/\"IMAGES_WORKER_NAME\"/\"$IMAGES_WORKER_NAME\"/g" workers/image-worker/wrangler.jsonc
@@ -215,12 +165,6 @@ update_wrangler_configs() {
         echo -e "${GREEN}    ✅ image-worker configuration updated${NC}"
     fi
 
-    if [ -f "workers/image-worker/src/image-worker.ts" ]; then
-        echo -e "${YELLOW}  Updating image-worker source placeholders...${NC}"
-        sed -i "s|'Access-Control-Allow-Origin': '[^']*'|'Access-Control-Allow-Origin': 'https://$escaped_pages_custom_domain'|g" workers/image-worker/src/image-worker.ts
-        echo -e "${GREEN}    ✅ image-worker source placeholders updated${NC}"
-    fi
-
     if [ -f "workers/pdf-worker/wrangler.jsonc" ]; then
         echo -e "${YELLOW}  Updating pdf-worker/wrangler.jsonc...${NC}"
         sed -i "s/\"PDF_WORKER_NAME\"/\"$PDF_WORKER_NAME\"/g" workers/pdf-worker/wrangler.jsonc
@@ -228,12 +172,6 @@ update_wrangler_configs() {
         echo -e "${GREEN}    ✅ pdf-worker configuration updated${NC}"
     fi
 
-    if [ -f "workers/pdf-worker/src/pdf-worker.ts" ]; then
-        echo -e "${YELLOW}  Updating pdf-worker source placeholders...${NC}"
-        sed -i "s|'Access-Control-Allow-Origin': '[^']*'|'Access-Control-Allow-Origin': 'https://$escaped_pages_custom_domain'|g" workers/pdf-worker/src/pdf-worker.ts
-        echo -e "${GREEN}    ✅ pdf-worker source placeholders updated${NC}"
-    fi
-
     if [ -f "workers/user-worker/wrangler.jsonc" ]; then
         echo -e "${YELLOW}  Updating user-worker/wrangler.jsonc...${NC}"
         sed -i "s/\"USER_WORKER_NAME\"/\"$USER_WORKER_NAME\"/g" workers/user-worker/wrangler.jsonc
@@ -244,12 +182,6 @@ update_wrangler_configs() {
         echo -e "${GREEN}    ✅ user-worker configuration updated${NC}"
     fi
 
-    if [ -f "workers/user-worker/src/user-worker.ts" ]; then
-        echo -e "${YELLOW}  Updating user-worker source placeholders...${NC}"
-        sed -i "s|'Access-Control-Allow-Origin': '[^']*'|'Access-Control-Allow-Origin': 'https://$escaped_pages_custom_domain'|g" workers/user-worker/src/user-worker.ts
-        echo -e "${GREEN}    ✅ user-worker source placeholders updated${NC}"
-    fi
-
     if [ -f "wrangler.toml" ]; then
         echo -e "${YELLOW}  Updating wrangler.toml...${NC}"
         sed -i "s/\"PAGES_PROJECT_NAME\"/\"$PAGES_PROJECT_NAME\"/g" wrangler.toml

package/scripts/deploy-config/modules/validation.sh

@@ -312,14 +312,8 @@ validate_generated_configs() {
     assert_contains_literal "app/config/firebase.ts" "$APP_ID" "APP_ID missing in app/config/firebase.ts"
     assert_contains_literal "app/config/firebase.ts" "$MEASUREMENT_ID" "MEASUREMENT_ID missing in app/config/firebase.ts"
 
-    assert_contains_literal "workers/audit-worker/src/audit-worker.ts" "https://$PAGES_CUSTOM_DOMAIN" "PAGES_CUSTOM_DOMAIN missing in audit-worker source"
-    assert_contains_literal "workers/data-worker/src/data-worker.ts" "https://$PAGES_CUSTOM_DOMAIN" "PAGES_CUSTOM_DOMAIN missing in data-worker source"
-    assert_contains_literal "workers/image-worker/src/image-worker.ts" "https://$PAGES_CUSTOM_DOMAIN" "PAGES_CUSTOM_DOMAIN missing in image-worker source"
-    assert_contains_literal "workers/pdf-worker/src/pdf-worker.ts" "https://$PAGES_CUSTOM_DOMAIN" "PAGES_CUSTOM_DOMAIN missing in pdf-worker source"
-    assert_contains_literal "workers/user-worker/src/user-worker.ts" "https://$PAGES_CUSTOM_DOMAIN" "PAGES_CUSTOM_DOMAIN missing in user-worker source"
-
     local placeholder_pattern
-    placeholder_pattern="(\"(ACCOUNT_ID|PAGES_PROJECT_NAME|PAGES_CUSTOM_DOMAIN|USER_WORKER_NAME|DATA_WORKER_NAME|AUDIT_WORKER_NAME|IMAGES_WORKER_NAME|PDF_WORKER_NAME|USER_WORKER_DOMAIN|DATA_WORKER_DOMAIN|AUDIT_WORKER_DOMAIN|IMAGES_WORKER_DOMAIN|PDF_WORKER_DOMAIN|DATA_BUCKET_NAME|AUDIT_BUCKET_NAME|FILES_BUCKET_NAME|KV_STORE_ID|MANIFEST_SIGNING_KEY_ID|MANIFEST_SIGNING_PUBLIC_KEY|EXPORT_ENCRYPTION_KEY_ID|EXPORT_ENCRYPTION_PUBLIC_KEY|YOUR_FIREBASE_API_KEY|YOUR_FIREBASE_AUTH_DOMAIN|YOUR_FIREBASE_PROJECT_ID|YOUR_FIREBASE_STORAGE_BUCKET|YOUR_FIREBASE_MESSAGING_SENDER_ID|YOUR_FIREBASE_APP_ID|YOUR_FIREBASE_MEASUREMENT_ID)\"|'(PAGES_CUSTOM_DOMAIN|DATA_WORKER_DOMAIN|AUDIT_WORKER_DOMAIN|IMAGES_WORKER_DOMAIN)')"
+    placeholder_pattern="(\"(ACCOUNT_ID|PAGES_PROJECT_NAME|PAGES_CUSTOM_DOMAIN|USER_WORKER_NAME|DATA_WORKER_NAME|AUDIT_WORKER_NAME|IMAGES_WORKER_NAME|PDF_WORKER_NAME|USER_WORKER_DOMAIN|DATA_WORKER_DOMAIN|AUDIT_WORKER_DOMAIN|IMAGES_WORKER_DOMAIN|PDF_WORKER_DOMAIN|DATA_BUCKET_NAME|AUDIT_BUCKET_NAME|FILES_BUCKET_NAME|KV_STORE_ID|MANIFEST_SIGNING_KEY_ID|MANIFEST_SIGNING_PUBLIC_KEY|EXPORT_ENCRYPTION_KEY_ID|EXPORT_ENCRYPTION_PUBLIC_KEY|YOUR_FIREBASE_API_KEY|YOUR_FIREBASE_AUTH_DOMAIN|YOUR_FIREBASE_PROJECT_ID|YOUR_FIREBASE_STORAGE_BUCKET|YOUR_FIREBASE_MESSAGING_SENDER_ID|YOUR_FIREBASE_APP_ID|YOUR_FIREBASE_MEASUREMENT_ID)\")"
 
     local files_to_scan=(
         "wrangler.toml"
@@ -328,11 +322,6 @@ validate_generated_configs() {
         "workers/image-worker/wrangler.jsonc"
         "workers/pdf-worker/wrangler.jsonc"
         "workers/user-worker/wrangler.jsonc"
-        "workers/audit-worker/src/audit-worker.ts"
-        "workers/data-worker/src/data-worker.ts"
-        "workers/image-worker/src/image-worker.ts"
-        "workers/pdf-worker/src/pdf-worker.ts"
-        "workers/user-worker/src/user-worker.ts"
         "app/config/config.json"
         "app/config/firebase.ts"
     )

package/tsconfig.json

@@ -8,6 +8,9 @@
     "**/.client/**/*.tsx",
     ".react-router/types/**/*"
   ],
+  "exclude": [
+    "tests/e2e"
+  ],
   "compilerOptions": {
     "lib": [
       "DOM",

package/workers/audit-worker/package.json

@@ -1,6 +1,6 @@
 {
   "name": "audit-worker",
-  "version": "6.1.6",
+  "version": "6.1.8",
   "private": true,
   "scripts": {
     "deploy": "wrangler deploy",
@@ -8,6 +8,6 @@
     "start": "wrangler dev"
   },
   "devDependencies": {
-    "wrangler": "^4.83.0"
+    "wrangler": "^4.84.0"
   }
 }

package/workers/audit-worker/src/{audit-worker.example.ts → audit-worker.ts}

@@ -2,24 +2,13 @@ import { hasValidHeader } from './config';
 import { handleAuditRequest } from './handlers/audit-routes';
 import type { CreateResponse, Env } from './types';
 
-const corsHeaders: Record<string, string> = {
-  'Access-Control-Allow-Origin': 'PAGES_CUSTOM_DOMAIN',
-  'Access-Control-Allow-Methods': 'GET, POST, OPTIONS',
-  'Access-Control-Allow-Headers': 'Content-Type, X-Custom-Auth-Key',
-  'Content-Type': 'application/json'
-};
-
 const createWorkerResponse: CreateResponse = (data, status: number = 200): Response => new Response(
   JSON.stringify(data),
-  { status, headers: corsHeaders }
+  { status, headers: { 'Content-Type': 'application/json' } }
 );
 
 export default {
   async fetch(request: Request, env: Env): Promise<Response> {
-    if (request.method === 'OPTIONS') {
-      return new Response(null, { headers: corsHeaders });
-    }
-
     if (!hasValidHeader(request, env)) {
       return createWorkerResponse({ error: 'Forbidden' }, 403);
     }

package/workers/audit-worker/wrangler.jsonc.example

@@ -7,7 +7,7 @@
   "name": "AUDIT_WORKER_NAME",
   "account_id": "ACCOUNT_ID",
   "main": "src/audit-worker.ts",
-  "compatibility_date": "2026-04-19",
+  "compatibility_date": "2026-04-20",
   "compatibility_flags": [
     "nodejs_compat"
   ], 

package/workers/data-worker/package.json

@@ -1,6 +1,6 @@
 {
   "name": "data-worker",
-  "version": "6.1.6",
+  "version": "6.1.8",
   "private": true,
   "scripts": {
     "deploy": "wrangler deploy",
@@ -8,6 +8,7 @@
     "start": "wrangler dev"
   },
   "devDependencies": {
-    "wrangler": "^4.83.0"
+    "@cloudflare/vitest-pool-workers": "^0.14.8",
+    "wrangler": "^4.84.0"
   }
 }

package/workers/data-worker/src/{data-worker.example.ts → data-worker.ts}

@@ -14,24 +14,13 @@ import {
 import { handleStorageRequest } from './handlers/storage-routes';
 import type { CreateResponse, Env } from './types';
 
-const corsHeaders: Record<string, string> = {
-  'Access-Control-Allow-Origin': 'PAGES_CUSTOM_DOMAIN',
-  'Access-Control-Allow-Methods': 'GET, POST, PUT, DELETE, OPTIONS',
-  'Access-Control-Allow-Headers': 'Content-Type, X-Custom-Auth-Key',
-  'Content-Type': 'application/json'
-};
-
 const createWorkerResponse: CreateResponse = (data, status: number = 200): Response => new Response(
   JSON.stringify(data),
-  { status, headers: corsHeaders }
+  { status, headers: { 'Content-Type': 'application/json' } }
 );
 
 export default {
   async fetch(request: Request, env: Env): Promise<Response> {
-    if (request.method === 'OPTIONS') {
-      return new Response(null, { headers: corsHeaders });
-    }
-
     if (!hasValidHeader(request, env)) {
       return createWorkerResponse({ error: 'Forbidden' }, 403);
     }

package/workers/data-worker/wrangler.jsonc.example

@@ -5,7 +5,7 @@
   "name": "DATA_WORKER_NAME",
   "account_id": "ACCOUNT_ID",
   "main": "src/data-worker.ts",
-  "compatibility_date": "2026-04-19",
+  "compatibility_date": "2026-04-20",
   "compatibility_flags": [
     "nodejs_compat"
   ], 

package/workers/image-worker/package.json

@@ -1,6 +1,6 @@
 {
   "name": "image-worker",
-  "version": "6.1.6",
+  "version": "6.1.8",
   "private": true,
   "scripts": {
     "deploy": "wrangler deploy",
@@ -8,6 +8,6 @@
     "start": "wrangler dev"
   },
   "devDependencies": {
-    "wrangler": "^4.83.0"
+    "wrangler": "^4.84.0"
   }
 }

package/workers/image-worker/src/handlers/serve-image.ts

@@ -12,8 +12,7 @@ export async function handleImageServing(
   request: Request,
   env: Env,
   fileId: string,
-  createJsonResponse: CreateImageWorkerResponse,
-  corsHeaders: Record<string, string>
+  createJsonResponse: CreateImageWorkerResponse
 ): Promise<Response> {
   const requestUrl = new URL(request.url);
   const hasSignedToken = requestUrl.searchParams.has('st');
@@ -56,7 +55,6 @@ export async function handleImageServing(
   return new Response(plaintext, {
     status: 200,
     headers: {
-      ...corsHeaders,
       'Cache-Control': 'no-store',
       'Content-Type': contentType,
       'Content-Disposition': contentDisposition

package/workers/image-worker/src/{image-worker.example.ts → image-worker.ts}

@@ -1,31 +1,18 @@
 import { routeImageWorkerRequest } from './router';
 import type { APIResponse, Env } from './types';
 
-const corsHeaders: Record<string, string> = {
-  'Access-Control-Allow-Origin': 'PAGES_CUSTOM_DOMAIN',
-  'Access-Control-Allow-Methods': 'GET, POST, DELETE, OPTIONS',
-  'Access-Control-Allow-Headers': 'Content-Type, Authorization, X-Custom-Auth-Key'
-};
-
 const createJsonResponse = (data: APIResponse, status: number = 200): Response => new Response(
   JSON.stringify(data),
   {
     status,
-    headers: {
-      ...corsHeaders,
-      'Content-Type': 'application/json'
-    }
+    headers: { 'Content-Type': 'application/json' }
   }
 );
 
 export default {
   async fetch(request: Request, env: Env): Promise<Response> {
-    if (request.method === 'OPTIONS') {
-      return new Response(null, { headers: corsHeaders });
-    }
-
     try {
-      return await routeImageWorkerRequest(request, env, createJsonResponse, corsHeaders);
+      return await routeImageWorkerRequest(request, env, createJsonResponse);
     } catch (error) {
       const errorMessage = error instanceof Error ? error.message : 'Unknown error occurred';
       return createJsonResponse({ error: errorMessage }, 500);

package/workers/image-worker/src/router.ts

@@ -8,8 +8,7 @@ import { parsePathSegments } from './utils/path-utils';
 export async function routeImageWorkerRequest(
   request: Request,
   env: Env,
-  createJsonResponse: CreateImageWorkerResponse,
-  corsHeaders: Record<string, string>
+  createJsonResponse: CreateImageWorkerResponse
 ): Promise<Response> {
   const requestUrl = new URL(request.url);
   const pathSegments = parsePathSegments(requestUrl.pathname);
@@ -36,7 +35,7 @@ export async function routeImageWorkerRequest(
         return createJsonResponse({ error: 'Image ID is required' }, 400);
       }
 
-      return handleImageServing(request, env, fileId, createJsonResponse, corsHeaders);
+      return handleImageServing(request, env, fileId, createJsonResponse);
     }
 
     case 'DELETE': {

package/workers/image-worker/wrangler.jsonc.example

@@ -2,7 +2,7 @@
   "name": "IMAGES_WORKER_NAME",
   "account_id": "ACCOUNT_ID",
   "main": "src/image-worker.ts",
-  "compatibility_date": "2026-04-19",
+  "compatibility_date": "2026-04-20",
   "compatibility_flags": [
     "nodejs_compat"
   ], 

package/workers/pdf-worker/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pdf-worker",
-  "version": "6.1.6",
+  "version": "6.1.8",
   "private": true,
   "scripts": {
     "generate:assets": "node scripts/generate-assets.js",
@@ -9,6 +9,6 @@
     "start": "wrangler dev"
   },
   "devDependencies": {
-    "wrangler": "^4.83.0"
+    "wrangler": "^4.84.0"
   }
 }

package/workers/pdf-worker/src/{pdf-worker.example.ts → pdf-worker.ts}

@@ -40,12 +40,6 @@ const reportModuleLoaders: Record<string, () => Promise<ReportModule>> = {
 
 };
 
-const corsHeaders: Record<string, string> = {
-  'Access-Control-Allow-Origin': 'PAGES_CUSTOM_DOMAIN',
-  'Access-Control-Allow-Methods': 'GET, POST, OPTIONS',
-  'Access-Control-Allow-Headers': 'Content-Type, X-Custom-Auth-Key',
-};
-
 const hasValidHeader = (request: Request, env: Env): boolean =>
   request.headers.get('X-Custom-Auth-Key') === env.PDF_WORKER_AUTH;
 
@@ -60,7 +54,7 @@ function isTimeoutError(error: unknown): boolean {
 function jsonResponse(body: unknown, status: number): Response {
   return new Response(JSON.stringify(body), {
     status,
-    headers: { ...corsHeaders, 'content-type': 'application/json' },
+    headers: { 'content-type': 'application/json' },
   });
 }
 
@@ -190,10 +184,6 @@ async function renderPdfViaRestEndpoint(env: Env, html: string, pdfOptions: Repo
     responseHeaders.set('cache-control', 'no-store');
   }
 
-  for (const [headerName, headerValue] of Object.entries(corsHeaders)) {
-    responseHeaders.set(headerName, headerValue);
-  }
-
   return new Response(endpointResponse.body, {
     status: endpointResponse.status,
     statusText: endpointResponse.statusText,
@@ -203,10 +193,6 @@ async function renderPdfViaRestEndpoint(env: Env, html: string, pdfOptions: Repo
 
 export default {
   async fetch(request: Request, env: Env): Promise<Response> {
-    if (request.method === 'OPTIONS') {
-      return new Response(null, { headers: corsHeaders });
-    }
-
     if (!hasValidHeader(request, env)) {
       return jsonResponse({ error: 'Forbidden' }, 403);
     }

package/workers/pdf-worker/wrangler.jsonc.example

@@ -2,7 +2,7 @@
   "name": "PDF_WORKER_NAME",
   "account_id": "ACCOUNT_ID",
   "main": "src/pdf-worker.ts",
-  "compatibility_date": "2026-04-19",
+  "compatibility_date": "2026-04-20",
   "compatibility_flags": [
     "nodejs_compat"
   ],

package/workers/user-worker/package.json

@@ -1,6 +1,6 @@
 {
   "name": "user-worker",
-  "version": "6.1.6",
+  "version": "6.1.8",
   "private": true,
   "scripts": {
     "deploy": "wrangler deploy",
@@ -8,6 +8,6 @@
     "start": "wrangler dev"
   },
   "devDependencies": {
-    "wrangler": "^4.83.0"
+    "wrangler": "^4.84.0"
   }
 }

package/workers/user-worker/src/handlers/user-routes.ts

@@ -5,56 +5,47 @@ import type {
   AccountDeletionProgressEvent,
   DeleteCasesRequest,
   Env,
-  ResponseHeaders,
   UserData,
   UserRequestData
 } from '../types';
 
-function createJsonResponse(data: unknown, headers: ResponseHeaders, status: number = 200): Response {
+function createJsonResponse(data: unknown, status: number = 200): Response {
   return new Response(JSON.stringify(data), {
     status,
-    headers: {
-      ...headers,
-      'Content-Type': 'application/json; charset=utf-8'
-    }
+    headers: { 'Content-Type': 'application/json; charset=utf-8' }
   });
 }
 
-function createTextResponse(message: string, headers: ResponseHeaders, status: number): Response {
+function createTextResponse(message: string, status: number): Response {
   return new Response(message, {
     status,
-    headers: {
-      ...headers,
-      'Content-Type': 'text/plain; charset=utf-8'
-    }
+    headers: { 'Content-Type': 'text/plain; charset=utf-8' }
   });
 }
 
 export async function handleGetUser(
   env: Env,
-  userUid: string,
-  corsHeaders: ResponseHeaders
+  userUid: string
 ): Promise<Response> {
   try {
     const userData = await readUserRecord(env, userUid);
     if (userData === null) {
-      return createTextResponse('User not found', corsHeaders, 404);
+      return createTextResponse('User not found', 404);
     }
 
-    return createJsonResponse(userData, corsHeaders);
+    return createJsonResponse(userData);
   } catch (error) {
     const errorMessage = error instanceof Error ? error.message : 'Unknown user data read error';
     console.error('Failed to get user data:', { uid: userUid, reason: errorMessage });
 
-    return createTextResponse('Failed to get user data', corsHeaders, 500);
+    return createTextResponse('Failed to get user data', 500);
   }
 }
 
 export async function handleAddUser(
   request: Request,
   env: Env,
-  userUid: string,
-  corsHeaders: ResponseHeaders
+  userUid: string
 ): Promise<Response> {
   try {
     const requestData: UserRequestData = await request.json();
@@ -96,16 +87,15 @@ export async function handleAddUser(
 
     await writeUserRecord(env, userUid, userData);
 
-    return createJsonResponse(userData, corsHeaders, existingUser !== null ? 200 : 201);
+    return createJsonResponse(userData, existingUser !== null ? 200 : 201);
   } catch {
-    return createTextResponse('Failed to save user data', corsHeaders, 500);
+    return createTextResponse('Failed to save user data', 500);
   }
 }
 
 export async function handleDeleteUser(
   env: Env,
-  userUid: string,
-  corsHeaders: ResponseHeaders
+  userUid: string
 ): Promise<Response> {
   try {
     const result = await executeUserDeletion(env, userUid);
@@ -113,29 +103,27 @@ export async function handleDeleteUser(
     return createJsonResponse({
       success: result.success,
       message: result.message
-    }, corsHeaders);
+    });
   } catch (error) {
     console.error('Delete user error:', error);
     const errorMessage = error instanceof Error ? error.message : 'Unknown error occurred';
 
     if (errorMessage === 'User not found') {
-      return createTextResponse('User not found', corsHeaders, 404);
+      return createTextResponse('User not found', 404);
     }
 
     return createJsonResponse({
       success: false,
       message: 'Failed to delete user account'
-    }, corsHeaders, 500);
+    }, 500);
   }
 }
 
 export function handleDeleteUserWithProgress(
   env: Env,
-  userUid: string,
-  corsHeaders: ResponseHeaders
+  userUid: string
 ): Response {
-  const sseHeaders: ResponseHeaders = {
-    ...corsHeaders,
+  const sseHeaders = {
     'Content-Type': 'text/event-stream; charset=utf-8',
     'Cache-Control': 'no-cache, no-transform',
     Connection: 'keep-alive'
@@ -182,14 +170,13 @@ export function handleDeleteUserWithProgress(
 export async function handleAddCases(
   request: Request,
   env: Env,
-  userUid: string,
-  corsHeaders: ResponseHeaders
+  userUid: string
 ): Promise<Response> {
   try {
     const { cases = [] }: AddCasesRequest = await request.json();
     const userData = await readUserRecord(env, userUid);
     if (!userData) {
-      return createTextResponse('User not found', corsHeaders, 404);
+      return createTextResponse('User not found', 404);
     }
 
     const existingCases = userData.cases || [];
@@ -201,31 +188,30 @@ export async function handleAddCases(
     userData.updatedAt = new Date().toISOString();
     await writeUserRecord(env, userUid, userData);
 
-    return createJsonResponse(userData, corsHeaders);
+    return createJsonResponse(userData);
   } catch {
-    return createTextResponse('Failed to add cases', corsHeaders, 500);
+    return createTextResponse('Failed to add cases', 500);
   }
 }
 
 export async function handleDeleteCases(
   request: Request,
   env: Env,
-  userUid: string,
-  corsHeaders: ResponseHeaders
+  userUid: string
 ): Promise<Response> {
   try {
     const { casesToDelete }: DeleteCasesRequest = await request.json();
     const userData = await readUserRecord(env, userUid);
     if (!userData) {
-      return createTextResponse('User not found', corsHeaders, 404);
+      return createTextResponse('User not found', 404);
     }
 
     userData.cases = userData.cases.filter((caseItem) => !casesToDelete.includes(caseItem.caseNumber));
     userData.updatedAt = new Date().toISOString();
     await writeUserRecord(env, userUid, userData);
 
-    return createJsonResponse(userData, corsHeaders);
+    return createJsonResponse(userData);
   } catch {
-    return createTextResponse('Failed to delete cases', corsHeaders, 500);
+    return createTextResponse('Failed to delete cases', 500);
   }
 }

package/workers/user-worker/src/{user-worker.example.ts → user-worker.ts}

@@ -10,28 +10,15 @@ import {
 } from './handlers/user-routes';
 import type { Env } from './types';
 
-const corsHeaders: Record<string, string> = {
-  'Access-Control-Allow-Origin': 'PAGES_CUSTOM_DOMAIN',
-  'Access-Control-Allow-Methods': 'GET, PUT, DELETE, OPTIONS',
-  'Access-Control-Allow-Headers': 'Content-Type, X-Custom-Auth-Key'
-};
-
-function createTextResponse(message: string, status: number, headers: Record<string, string>): Response {
+function createTextResponse(message: string, status: number): Response {
   return new Response(message, {
     status,
-    headers: {
-      ...headers,
-      'Content-Type': 'text/plain; charset=utf-8'
-    }
+    headers: { 'Content-Type': 'text/plain; charset=utf-8' }
   });
 }
 
 export default {
   async fetch(request: Request, env: Env): Promise<Response> {
-    if (request.method === 'OPTIONS') {
-      return new Response(null, { headers: corsHeaders });
-    }
-
     try {
       await authenticate(request, env);
 
@@ -48,15 +35,15 @@ export default {
       const isCasesEndpoint = parts[2] === USER_CASES_SEGMENT;
       
       if (!userUid) {
-        return createTextResponse('Not Found', 404, corsHeaders);
+        return createTextResponse('Not Found', 404);
       }
 
       // Handle regular cases endpoint
       if (isCasesEndpoint) {
         switch (request.method) {
-          case 'PUT': return handleAddCases(request, env, userUid, corsHeaders);
-          case 'DELETE': return handleDeleteCases(request, env, userUid, corsHeaders);
-          default: return createTextResponse('Method not allowed', 405, corsHeaders);
+          case 'PUT': return handleAddCases(request, env, userUid);
+          case 'DELETE': return handleDeleteCases(request, env, userUid);
+          default: return createTextResponse('Method not allowed', 405);
         }
       }
 
@@ -65,24 +52,24 @@ export default {
       const streamProgress = url.searchParams.get('stream') === 'true' || acceptsEventStream;
 
       switch (request.method) {
-        case 'GET': return handleGetUser(env, userUid, corsHeaders);
-        case 'PUT': return handleAddUser(request, env, userUid, corsHeaders);
+        case 'GET': return handleGetUser(env, userUid);
+        case 'PUT': return handleAddUser(request, env, userUid);
         case 'DELETE': return streamProgress
-          ? handleDeleteUserWithProgress(env, userUid, corsHeaders)
-          : handleDeleteUser(env, userUid, corsHeaders);
-        default: return createTextResponse('Method not allowed', 405, corsHeaders);
+          ? handleDeleteUserWithProgress(env, userUid)
+          : handleDeleteUser(env, userUid);
+        default: return createTextResponse('Method not allowed', 405);
       }
     } catch (error) {
       const errorMessage = error instanceof Error ? error.message : 'Unknown error occurred';
       if (errorMessage === 'Unauthorized') {
-        return createTextResponse('Forbidden', 403, corsHeaders);
+        return createTextResponse('Forbidden', 403);
       }
 
       if (errorMessage === 'User KV encryption is not fully configured') {
-        return createTextResponse(errorMessage, 500, corsHeaders);
+        return createTextResponse(errorMessage, 500);
       }
       
-      return createTextResponse('Internal Server Error', 500, corsHeaders);
+      return createTextResponse('Internal Server Error', 500);
     }
   }
 };

package/workers/user-worker/wrangler.jsonc.example

@@ -2,7 +2,7 @@
   "name": "USER_WORKER_NAME",
   "account_id": "ACCOUNT_ID",
   "main": "src/user-worker.ts",
-  "compatibility_date": "2026-04-19",
+  "compatibility_date": "2026-04-20",
   "compatibility_flags": [
     "nodejs_compat"
   ], 

package/wrangler.toml.example

@@ -1,6 +1,6 @@
 #:schema node_modules/wrangler/config-schema.json
 name = "PAGES_PROJECT_NAME"
-compatibility_date = "2026-04-19"
+compatibility_date = "2026-04-20"
 compatibility_flags = ["nodejs_compat"]
 pages_build_output_dir = "./build/client"